Vulnetix
Try Vulnetix Request Demo
CVE-2020-12035 PUBLISHED CVSS 4.900000095367432 MEDIUM

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings and calibration.

EPSS 0.05% · 14.5th percentile

Risk Scores

CVSS v3.1
4.900000095367432
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
EPSS Score
0.05%
14.5th percentile

Affected Products

VendorProductVersions
n/aBaxter PrismaFlex and PrisMax*
baxterprismaflex_firmware
baxterprismax_firmware0

Timeline

References

Open in Interactive Console →